Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/Sxz2kosBqb7p7SXH7hpwfJ3TSCE.roa
File: Sxz2kosBqb7p7SXH7hpwfJ3TSCE.roa (raw, json)
Hash identifier: pk1MEQWmNhxCW8FucmjULWC7kFLHATyWTPcxLU/e/ds=
Subject key identifier: 4B:1C:F6:92:8B:01:A9:BE:E9:ED:25:C7:EE:1A:70:7C:9D:D3:48:21
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01920E93A00E14E7AAD731017DBDA85BAB17
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/Sxz2kosBqb7p7SXH7hpwfJ3TSCE.roa
Signing time: Fri 20 Sep 2024 08:36:48 +0000
ROA not before: Fri 20 Sep 2024 08:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49367
IP address blocks: 37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 22
45.86.144.0/22 maxlen: 22
77.81.103.0/24 maxlen: 24
85.204.255.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/23 maxlen: 23
89.34.239.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
93.113.144.0/21 maxlen: 21
93.113.144.0/22 maxlen: 22
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/22 maxlen: 22
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
185.184.240.0/22 maxlen: 22
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.184.243.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.208.17.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.215.6.0/23 maxlen: 23
188.215.6.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
193.239.140.0/23 maxlen: 23
2a04:68c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:93:a0:0e:14:e7:aa:d7:31:01:7d:bd:a8:5b:ab:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Sep 20 08:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b1cf6928b01a9bee9ed25c7ee1a707c9dd34821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e6:eb:6e:70:e0:42:d1:5f:14:55:e1:c9:94:
bb:4c:bd:24:33:b1:a8:7b:44:bb:0f:aa:f7:03:3f:
58:0e:90:83:30:db:3d:fc:ee:6d:32:e4:f3:75:08:
fb:9a:64:6e:84:7e:06:08:58:9c:fd:0e:0f:52:f2:
14:4d:4b:c1:6f:5c:61:be:ae:8f:97:e5:17:15:1d:
f0:b5:f0:93:eb:62:3e:49:55:87:c7:79:69:8c:53:
36:e2:b1:b0:42:16:94:73:dd:9e:42:30:92:c9:be:
41:64:50:2c:b3:4a:81:3e:23:7e:f5:58:7e:49:5c:
6b:be:0c:7c:dc:d9:9f:e9:a3:24:51:89:f5:af:46:
b7:d3:6f:4c:11:10:93:6d:76:85:68:94:8f:cc:57:
17:92:97:d7:c0:be:cb:20:1b:c2:89:d1:6f:eb:8b:
c1:70:d1:c0:f7:34:e8:6a:52:c6:a6:ab:5e:79:0a:
d7:1f:50:eb:bd:b7:85:60:a8:27:71:24:3d:61:89:
a2:50:f3:02:67:d2:ad:c5:d9:d7:d8:4b:c3:b4:8a:
1b:fd:17:12:63:45:a6:5b:d4:89:81:d0:ff:f9:0c:
de:35:36:8f:25:a6:83:95:4a:22:04:e4:e8:bf:1f:
42:b6:72:bb:6f:e1:d1:7d:72:45:9e:bd:49:ed:b6:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:F6:92:8B:01:A9:BE:E9:ED:25:C7:EE:1A:70:7C:9D:D3:48:21
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/Sxz2kosBqb7p7SXH7hpwfJ3TSCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.174.0/24
45.83.56.0/22
45.86.144.0/22
77.81.103.0/24
85.204.255.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.35.0/24
89.43.52.0/24
91.212.52.0/24
91.229.186.0/24
93.113.144.0/21
94.176.212.0/24
94.177.48.0/23
185.184.240.0/22
188.208.16.0/23
188.211.248.0/24
188.215.6.0/23
188.240.228.0/23
193.239.140.0/23
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:a1:d0:5e:5e:18:f0:67:fa:73:42:6f:0d:b9:09:68:97:b7:
44:54:66:3f:3e:9a:6e:bf:f5:d6:25:85:ee:ee:96:01:78:aa:
0b:3e:51:2e:70:79:f7:7a:9f:69:9a:a2:c4:48:a5:a0:8e:32:
7d:74:48:8f:e2:3b:4b:f7:e9:2e:60:97:54:68:77:58:91:28:
b4:00:a0:02:0c:9f:9d:37:4d:27:19:2f:fe:0c:ce:b7:c8:b6:
0b:78:2c:57:f1:6f:19:f6:ac:86:00:80:a0:2d:07:4b:df:2c:
7b:d2:59:ba:a3:58:5b:d8:ed:01:de:62:af:24:d0:b6:0f:23:
26:78:4c:d4:b5:17:54:92:c0:bd:c9:30:c5:85:fd:a6:c7:7c:
96:24:81:f2:03:a1:dd:37:d5:2f:1a:f6:1b:c7:a0:79:b4:ba:
24:05:f2:78:8d:d1:92:c0:49:21:51:7a:83:1e:6a:ff:cb:80:
1b:df:a2:f9:98:c4:72:8d:c6:2d:02:09:3f:95:c6:50:6f:cf:
c9:ed:e0:80:e0:b0:44:52:29:a8:ae:94:60:a2:2d:78:7d:82:
2a:9e:2f:3a:38:92:28:21:47:c7:5b:3c:df:ab:a6:9b:ae:ac:
ee:00:21:03:ad:b1:77:48:14:89:ae:d5:41:6c:9e:c7:95:70:
3d:53:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:17:57 2024 by rpki-client on console.sobornost.net